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© Authenticating methods and systems. 



© Authenticity of a paper cocument (10) is tested 
by sensing (40) its transparency and comparing (32) 
the sequence of representations oroduced, with a 
sequence of reference representations read (39) 
from a record of an earlier-made sensing written 
(38) on the document (10) m an cffset-printed (and 
therefore non-uniform), magnetic stripe (18). The ref- 
erence sequence is written or. tr*e stripe (18) in the 
form of an encrypted iden:ift^r (i5€. Figure 4) within 
a bit string (Figure 4) that -nierspersed with fram- 
ing characters (155) and includes a puolic encryption 
C\|key (158) and an error-correction code (162). Each 
^data and control bit of the bit-srnng format is written 
00 as an eight-bit character enabling ready distinction 
^between data and control bits anc enhancing error 
W detection and correction of the string when read 
C£)(39) from the non-uniform stn'pe (18); the relative 
00 timings and the polarities of oeaks of the analogue 
^ signal from the magnetic reading head 939) deter- 
Qmine the data value ("0" or "l" according to timing 
^interval t or t'2) or the control nature (interval 3t/2) or 
Ojeach read bit. The error-correction code is applied to 
reduce errors and enable decryption of the recorded 
identifier using the public key. whereby an appro- 
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priate degree of correlation for authenticity confirma- 
tion, can be achieved with the fresh transparency 
output (40). 
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Authenticating 

This invention relates to methods of,.- and sys- • 
terns for, authenticating documents or, other items, 
of the kind in which a sequence of representations 
freshly derived from sensing the -relevant item is 
compared with a sequence of reference represen- 
tations registered in respect of, that item. 

Methods and. systems of the above-specified 
kind are known, for example from U. S. patent No. 
4,423,415 (Goldman), for authenticating items such 
as, for example, product labels, identification cards, 
value cards and credit cards. The, above-identified 
patent discloses a method and system, in which: the 
translucency of the item is sensed, at successive 
locations of a scanned area of the. item., anp 1 , a. data 
sequence representative of measurements,, of : the 
translucency at those locations is registered, p/i the - 
item itself, in order to provide a reference, registra- 
tion of those measurements., Authentication of the 
item involves fresh sensing, of the translucency at 
the successive locations, and comparison for cor- 
relation between the freshly-derived sequence of 
measurement representations and the registered, 
reference sequence. 

The reference data sequence in the above, ex- 
ample, is registered on the item as a printed num- 
ber identifier or as a magnetic recording. Where 
targe data sequences are. involved, the use of mag- 
netic recording is more convenient, but there are 
problems associated with the t provision of magnetic 
recordings especially in those circumstances where 
the item is. for example, a financial securities; docu- 
ment of paper or other fibre-composed material. 
These problems are associated with the uneven 
surface of such a document, since t a magnetic 
stripe printed or otherwise deposited on the surface 
will exhibit an irregular geometry which will affect 
the uniformity of magnetic characteristic along- its 
length. Non-uniformity, of magnetic , characteristic 
affects the ability to recover , the recorded data 
reliably* arid this makes correlation of the freshly- 
sensed sequence of representations f with the re- 
corded data uncertain, leading to unacceptable er- 
rors in the authentication process. .... y \ 
It would be possible to overcome the problem 
by attaching a strip of magnetic tape to, the docu- 
ment instead of printing or, otherwise depositing 
magnetjc material on the document. Magnetic tape 
of. highly uniform rnagnetic characteristic that would 
enable reliable and accurate reading or the re- 
corded identifier to : be achieved, is readily avail- 
able," but attaching tape to the document, in this 
way .would be . generally incompatible with require- 
ments for the production pf securities documents:- 
Moreover, attachment .ptthe tape would make the 
document more susceptible to counterfeiting and 



.0286378 A2J_> 



Methods and Systems 

f ■ fraudulent attack, as well as to damage. 

Efforts to overcome the problem associated 
with non-uniformity of magnetic characteristics of 
V printed magnetic material, have included steps to 
5 improve the method of application and "composition 
of the magnetic ink used, but have not been suc- 
• ; *cessful: In f ariy event, there remains the problem 
- that* documents are subject to damage, for example 
tearing; 1 scratching and folding, that may also affect 
to :the- magnetic material and the ability to' reproduce - 
■ ■ the 1 recorded identifier with integrity. 

1 It ; is ; an object of the present invention to pro- 
■■• vide a method of, arid system for, authenticating a 
^i* document or other item, of the said above-specified 
*s kind, in which correlation of the compared freshly- 
derived and reference representations is facilitated 
r in* spite of non-uniformities associated with registra- 
tion 'of -the reference representations and damage 
;'>to'such ; item; : 
20 - According to one aspect of the present inven- 
tion,, a;- method of authenticating a document or 
■ other 1 ^rtem. of the said above-specified kind, is 
characterised in that* the sequence of reference 
representations' is a bit string recorded in magnetic 
25 -material of the' item, that the recorded bit string is 
readout from the magnetic material, and that the 
bit string as read out is processed to detect errors 
- therein and to correct for at least some of the 
errors detected, before comparison with the 
30 ( freshly-derived 'representations is made. 

According t6 another aspect of the present 
! invention; a system for authenticating a document 
or other item, of the said above-specified kind is 
characterised in that the system includes means 
35 -for reading the sequence of reference representa- 
tions as a bit string from magnetic material of the 
item, 1 arid means for submitting the bit string as 
read out. to a process for detecting errors therein 
and for correcting at least some of the errors 
40 detected, before comparison with the freshly-de- 
rived representations is made. 

The bit string may be recorded on the docu- 
mentor other' item' in' encrypted form, and in this 
respect'the encryption algorithm used may be such 
45 as described in {j. S. 'Patent No.' 4,405,829 (Rivest 
et al). furthermore, 1 ' the bit string may include an 
error-corr'ecting ,: cHde derived in accordance with 
the teaching at page 269 et seq of Error-Correcting 
Codes (Second Edition) by Peterson, and Weldon, 
so published by MIT Press. Where encryption and an 
error-correcting code are used, the bit string may 
have a format in which the t string starts with a 
sequence of n 1 " Bits, and ends with a number of 
repetitions of a predefined bit sequence identifiable 
as a "framing character". The sequence of "1" bits 
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at the start of the string may be followed by a bit 
sequence identifiable as a "start sentinel" .which is 
then in its turn followed by a data field that starts 
and ends with a framing character and contains, in 
a predefined order, the encrypted identifier, the 
error-correcting code, a public decryption key. and 
any other, optional additional data; a bit . sequence 
identifiable as a "stop sentinel" follows the. data 
field ahead of the terminating repetitions of framing 
characters. Framing characters, which are desirably 
interspersed at defined bit intervals throughout -the 
data field facilitate identification of the location and 
quantity of erroneous, ( missing or lost data, in the 
bit string as read out from the magnetic- material of 
the document or other item, and in some instances 
enable the value of the erroneous, missing or lost 
data to be recovered. The. bit string may.be -.written 
m the magnetic, material using, .for. example, the 
F2F magnetic recording convention., 

The processing, of the bit string may include a 
step of assigning data values. to bits of the string in 
dependence upon relative timings .of signal-peaks 
read out from the magnetic material. More specifi- 
cally, reading of the bit string from the magnetic 
material may include the step of detecting .mag- 
netic flux changes in the magnetic material to. de- 
rive an analogue signal dependent. .on the , flux 
changes, determining the relative timings of peaks 
m the amplitude of the analogue signal,, and during 
processing of the bit string assigning data values to 
bits of the string according to the peak-polarities 
and the detected relative timings of the peaks in 
the analogue signal. The time interval between 
successive peaks may be . used, to determine 
whether the data value '0' .or T is assigned to the 
respective bit, or the bit is treated, otherwise than 
as a data bit of the sequence, for example, as, a 
framing or other control character The. data, value 
'0' or *r may be assigned to the 'respective, bit in 
dependence upon whether the interval corresponds 
to a period of length t or t/2; if the interval is. of 
length 3 1/2 the bit may be assigned control-char- 
acter status. 

Each bit value of the'string may be recorded 
as . a plurality of bits in ' order to.\enhance. error 
detection and correction. 

The method and system, of the present. inven- 
tion may be applied to. authenticating, a paper or 
other document of fibre-composed' material' having 
an uneven surface, where the magnetic material is 
printed, for example by offset printing, , as a stripe 
on the document. In a preferred method and sys- 
tem, a uniqueness characteristic, ! such as tran- ; 
slucency. of the document is measured at a series' 
of positions within a defiried area of' the document, 
and the series of measurements is compared with, 
a corresponding series' of measurements previous- 
ly taken and recorded, as part of the bit string, in 



the magnetic stripe. However, because of the non- 
.. . uniform, magnetic characteristic of the magnetic 
stripe, and because of scratches, folds, tears and 
other defects of. or damage to, the document, the 
5 , previously-recorded bit string as read out from the 
stripe, will be subject to errors and missing data. 
According to the' present invention the bit string 
read out is processed to detect the errors and to 
make correction, and in this regard, it ha been 
w found possible with such detection and correction 
• to recover the originally-recorded bit string wholly, 
/■or substantially-wholly, in spite of significant 
-magnetic-stripe non-uniformity and document dam- 
- age. 'More especially, it has been found possible to 
'5 - -recover the recorded bit string with a sufficient 
degree of 'accuracy to enable correlation to b 
-achieved with the freshly-sensed series of 
uniqueness-characteristic measurements. The cor- 
relation required " for reliable authentication' of the 
20 ^ document does- not. however, need to be exact. In 
particular, provision for' the possibility of a certain 
number and/or nature of errors of match between 
■ the= compared sequences, can be made without 
compromising the validity of the authentication 
25 .technique. 1 



BRIEF DESCRIPTION QF THE DRAWINGS ~ 

30 • in the drawings, which constitute a part of the 
specification; exemplary embodiments' are set forth 
as follows: ' '" 

: -Figure T is a partial cutaway perspective of a 
document with a storage medium thereon and' sp'e- 
3S cifically a magnetic stripe storage medium; 

• Figure 2 is a top partial view of a document 
showing an area characterized by a uniqueness 
characteristic and a magnetic stripe .storage me- 
dium; ■ 

<o Figure 3 is a simplified block diagram illus- 

trating a system, including an optional write sub- 
system, in accordance with the invention; / ' 

Figure 4 is a pictorial representation of a bit 
string formatted for storage on a storage medium, 
*5 sucrras a^magnetic stripe, on a document; 

• Figure 5 'is a simplified block diagram show- 
ing a write subsystem such' as ' that depicted in 
Figure 3; f 1 • • ' 

Figure -6A, SB' -and ! 6C illustrate various 
so waveforms, timing relationships and binary bit 
string data illustrating the operation of the authen- 
tication system in accordance with the invention; 

Figure. 7 'is a simplified block diagram of a 
read subsystem useful in reading flux changes 
55 from a magnetic stripe; . 

■Figure 8 is an 'illustration of various address, 
bit data, write antf read signals at various locations 
m the. authentication system' of Figures 1 3, 5 and 7; 
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Figure 9 is a^ series of waveforms illustrating 
the operation o: the correlator and peak and polar- 
ity detector blocks of 'Figure 7; 

- Figure 10 is a partial flow chart illustrating a 
means of recovering the number of data bits in a 
bit string and computation of data frame offsets, 
and 

Figure 11 >s a flow chart illustrating one 
means of identifying the number and locatidn of 
bits in a section of the? bit ! string identified as 
containing erroneous bit values. r ' 

DETAILED DESCRIPTION ^. - 

Although the present invention contemplates 
the use of various : 'storage mediums on a* docu- 
ment, the following "detailed description is given 
with reference to a magnat e stripe' as the preferred 
storage medium. ' f ' 

- Referring initially to Figure 1. ah item '100/ such 
as a document made out of a fibrous' medium 1 102 
such as. paper, has a surface 106 on which a 
magnetic stripe 104 is disposed such ! as by offset 
printing. The paper medium from which most docu- 
ments of value such as' stocks cr bonds are made 
result in a- highly irregular surface geometry. When 
a composition such as a magnetic ink is' applied to 
such a ^ surface to form a magnetic stripe,' the 
resultant stripe assumes a similar ir regular 'geome- 
try. The magnetic stripe 104 consequently has a 
highly irregular geometry exhibiting* a non-uniform 
magnetic flux characteristic along its length. Such a 
stripe is nevertheless the preferred authenticity ver- 
ification storage medium lor such documents of 
A/alue. . - • . - . 1 ' : : 

Referring to Figure 2. the system in "accor- 
dance with the invention ccmprises a printable item 
10 made of paper or any ; other printable medium 
such as that described in conjunction with Figure 1. 
Matter readable by an observer such as words, 
designs pictorial representations and the lit<e 12 
may be printed across tne J surface ot the document 
10 using any desired method such as offset print- 
ing. For example, the printing may be such as to 
identify the document as a stock or bond, which 
may be of considerable monetary worth and indeed 1 
be a negotiable instrument. In order to provide 
additional protection against counterfeiting, a space 
14 on the surface of the document 10 is set aside 
to define a field of sensing or sensible locations. A 
corner indicia 16 is positioned about the edge of 
the space '14 to define the spoco and enable align- 
ment of a' reader SO ! (Figure 3Vwith thb space for 
subsequent ; repetitive reading of the uniqueness 
characteristic oMhe'docum'cnt such' as in the man-" 
ner set forth in" U/ Sf Patent No/ 4,423.415, The 
space 14 defines a speciffe'd aroa of the' item which 
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has. for example, a random but substantially non- 
changing transparency variation over its surface. 
. and this, random . transparency establishes the 
machine-readabje uniqueness characteristic in ac- 

5 cordance with the teaching of U. S Patent No. 
4,4,23.415. Once sensed, an identifier representa- 
tive of the. uniqueness characteristic is derived and 
assigned.. Of course, any. other uniqueness char- 
acteristic of, the. document which can be sensed 

jo and referenced by an identifier value, can be uti- 
lized without departing from the present invention. 
, The document 10 further includes a storage 
, medium, which, in the illustrated embodiment is a 
' 'magnetic stripe 18. disposed over a portion of the 

75 irregular, randpm surface 19 of the document 10 
'by printing arid . preferably by offset printing. The 
magnetic stripe 18. will generally have non-uniform 
geometric and magnetic flux characteristics such 
as those described in conjunction with Figure 1. 

20 Referring to Figure 3. a. simplified block dia- 

gram of an. authentication system in accordance 
with ihe invention includes the document 10 of 
Figure having the magnetic stripe 18 to provide 
'ah escort memory .. of the document 10. In this 

25 authentication- system, as illustrated, the unique- 
ness characteristic (such as transparency) is 
sensed from, region 14 by a uniqueness-character- 
istic sensor 40.. The uniqueness-characteristic read- 
er ( 30 is coupled to the, sensor 40 to receive a 

30 signal representative of the sensed uniqueness 
characteristic .and ^herefrom define the identifier 
such as a, binary number. Apparatus and methods 
for reading and, deriving an identifier representative 
of the uniqueness characteristic are fully described 

35 in U.S. Patent No. 4,423.415, which patent is- here- 
by incorporated by reference. * A control processor 
32 receives the . identifier from the reader 30 and 
preferably encrypts the identifier and then pro- 
cesses, the encrypted identifier to generate an error 

40 correctiqp code . for the. encrypted identifier. In the 
preferred embpdiment, the error correction code is 
a Bose-Chaudhure-Hocquenghem code whose 
derivation is fully described at page 269 et seq. in 
Error- Correcting Codes by Peterson and Weldon 

45 published by fylJJ Press. The encrypted identifier 
and ; the , .errqr, correction code, both digitized, are 
combined with any other desired data, such as a 
public encryption. key., to form a coded identifier. 
, Before being, stored on < the storage stripe, the 

so cpjded identifier. Is formatted in accordance with a 
predefined .format , selected to facilitate authentica- 
tion ; and. ; ^ata recovery The ; result is a bit string 
which, .is serit to a write subsystem 34. 1 The write 
subsystem 34; } generates a "write current" signal 

55 21 2 .{Figure 6A) representative of the bit string 214 
(Figure 6A). The write current signal 212 is pro- 
vided to, a write head 38 which, when positioned in 
close proximity to . the magnetic stripe 18, will 
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cause flux changes along the length of the stripe 
18 as the stnpe \s moves past. In order to' write 
the bits of the bit string 214 onto the stripe 18 at 
the correct !ocation. a transport mechanism 36, 
under control of the control- processor 32; causes s 
the GDCument 10 to physically pass beneath the 
-vnte head- 38 so that the write subsystem 34 will 
cause f:uY changes representative of individual 'bits 
•n sequence tc occur at predefined f spacings along 
trie magnetic stnpe 18. A transport' mechanism, ro 
useful ,n sue p. a configuration, is* described in' the 
afcromflrrirsned U S. Patent No. 4.423,415.' Of 
course, rn* invention is equally applicable if the 
doowr-ioni 10 remains stationary and the write head 
38 m C ve 5 azross The document. 1 1 ' , 5 

To- ,-f-nty <n* authenticity' of the document * 10. l ' 
the .nfc^anor- stored on the magnetic stripe 1 18 is 
reac is-r-e ^x^'ent ,s moved 1 by the transport 
mecnari.sm 36 ras! a second head' 39 unde^con- 
tro of trny cortrc , orccessor <32. the" resultant sig- 20 
nal -idea atreanrg as the signal 228 of Figure 8 ' 
but t realty •hav.mg the characteristics * of signal 
300 cf F.g^re 8) .s rrovtded to ^' read/verify ' sub- 
system *2 wn.cn performs signal processing and 
correiat.cn processing to recover a bit siring which 25 
ideally vou J te tne same as the bit 1 string original- * 
ly storec D.t n -eaiity 'nas both errors in the bit 
values and m.ss.nq b'ts The resultant' read bit 
stnng signal -202 in the form 'of time • 

durations between <c*ak S and peal< ; p0 far«V infoV- } 30 
mation. »s then sent to ne control processor" 32 
which acc^es iocai and global 'error correction' al- 
gonthms m accordance with the 'invention* to cor- 
rect the remaining 'errors arid thereby 1 reprieve at 
least the encrypted .dentrier part 6'f the bit string 35 
witnout error. The- encrypted identifier is next de- 
crypted .in the control processor 32 to retrieve the 
identifier. The retried identifiers compared' with 
a verification value from the reader 30 in the pro- 
cessor 32. If the retrieved identifier and 'the veYifica- 40 
tion value match according to a predefined 1 match 
criterion such as bit oy bit identity; the document is 
verified as genuine. • • * ■ * ; ' * 

The specific method of writing onto the' mag- 
netic stripe, reading data from' the magnetic ' stripe 1 45 
and then processing the information to recapture " 
missing or unreadable information will be' described 
in greater detail hereafter. . • • 

Referring (o Figure 4, the preferred 5 format 'of : 
the bit string 149 to. be stored or* the ■ magnetic 50 
stripe 18 includes a leading edge 1 '150- to 'allow 
automatic gain: control (AGG) in -a- conventional 
manner, and a trailing edge 180 with a similar AGO 1 
to allow reading -m. either direction. *The leading 
edge is a string .ofTs" and -trailing edg : e* ; r8So 55 
preferably consists of a- string of non-data char- 
acters referred, to. as framing characters. The num- 
ber of ~1V in the leading edge and number of 



framing characters .in the trailing edge is unimpor- 
tant and may be any number sufficient to provide 
AGC. Following the leading ,edge 150 is a predefin- 
ed sequence of bits. Jor example those represented 
by the 24 bit hexidecimal number FC0167 defined 
as a start. sentinel 152. Following the start sentinel 
152 is a data field 154 comprising a first framing 
character 1( 1 53, an error correction code 162, a 
format designation coding 160. a. public encryption 
key designation 158. the encrypted, identifier 156. 
and a final framing character 1.64. Following the 
framing character 164 is a stop sentinel 166 which 
is a predefined and recognizable sequence of bits, 
for example, those represented by the 24 bit hex- 
idecimal number 09D7FF. 
, .In. accordance with, the invention, the data field 
J 54 is divided by framing character 155 into equal 
.subsections comprised .of a predefined number of 
f( data bits, (e. g., 64 bits of .data)! Because (l) the 
number of data bits between framing characters is 
predefined, and (2) the bit t;me ; that is. the time 
between, flux changes representative of a.? f zero" 
and. a, "one" are known or can be determined, and 
(3) certain polarity conditions must exist in^the 
sensed signal, (for example, the magnetic -flux 
change can only change from a positive to a nega- 
, tj Y^ or a negative to. a positive, never, a positive to 
a positive .or, a negative to a negative), correction of , 
numerous local errors in, individual, bits can be 
performed. . Even when, the value of. 'certain bits 
cannot be determined by such local error correc- 
tion, the bit. time, time between framing characters 
t and polarity., information, enables the locations 
errors (their addresses Jn, the bit string) and *he 
number of missing or erroneous bits to be deter- 
mined. This information is used in conjunction with 
the. error correction codes to correct erroneous 
data or recover missing data in the bit string. 
. .. f In a. preferred embodiment .of- the invention, 
encryption, f of the identifier occurs using a private 
key while decryption is done using, a public key. In 
accordance with the teaching of U.S. Patent No. 
4,405.829, -successful decryption . according to the 
public key evidences the? authenticity of the. docu- 
ment by establishing that the document originated 
from a particular source since d^cryption using the 
public ( key designation would. .only -be .possible if 
encryption had occurred in accprdance with a pri- 
vate key knpwn only to the legitimate originator of 
the document. > , 

Referring again to Figure 4, an .illustrative* data 
field format, consists, of 87 bytes which includes the 
encrypted identifier 156. the public key designation; 
158 and format designation. 160, and 32. bytes of, 
error correction code 1^2. The total of 1 19 bytes 
(952 bits) in the.psaja 'fielo; ,1 $4 are, divided, into, data 
frames 168 consisting, of . 8 bytes (64 bits), of data/ 
The start and stop sentineis 152 and 1 66. neither 
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'of which -can have" any nested framing characters, 
are each : 24 bits in length. In accordance with error 
correcting theory, as set forth in the above book 
entitled Error-Correcting Codes , up to 1 6 f bytes of 
missing data can be recovered in the bit string 149 
provided the quantity of missing data can be deter- 
mined. As previously described, the non-data fram- 
. ing characters , f bit times and polarities 'are used to 
define the location 1 , and quantity ofmissmg or erro- 
neous data in a manner to be>described hereafter. 

With further reference to the format of the bit 
string, the data in the bit string 149 can be gen- 
erated and stored in a -register ^as a series of n 1"s 
and."0"s in a ■ conventional manner. The register in 
the above illustration of Figure 4 would be 952 bits 
(storage locations) or 119 bytes long. Using the 
F2F convention for storing the data in such a 
register on a magnetic stripe, a single flux change 
within a predefined spacing along the magnetic 
stripe represents a "0 ,,; whereas 1 two equally 
spaced flux changes within the same defined spac- 
ing would represent a "1". Stated differently, the 
value of each data bit may be represented by time 
periods ^between flux changes as the magnetic 
head 38 or 39 moves along the magnetic stripe 18 
at a predefined speed, A "0"' would be represented 
by a single time period (designated in chart 230 of 
Figure 6B as "t") whose value is determined by the 
bit density of the medium, the data sample rate, 
and the relative speed between the magnetic head 
(38 or 39) writing data onto or reading data from 
the stripe 18. A *'i M would be represented by two 
consecutive . time periods, each equal to 1 2 the 
duration of the time* period of a -"0" or V.2 t (see 
time charts 303, Figure 8 and 230, Figure 6B). In 
the example of Figure 8, t is taken as 1 12 micro- 
seconds. < ■ . 

- However, simply storing one data bit in : one 
register location makes it impossible for the pro- 
cessor 32 to define- framing characters digitally 
since framing characters are represented 5 by flux 
changes at intermediate times between when a flux 
change, representative of 'a data bit. would occur. 
Referring to bit'sequence'226 in Figure 6B and 214 
in Rgure 6A, the impossibility of distinguishing a 
non-data framing character from a data character, 
when each bit is represented by only one storage 
location, can be seen. To overcome 'this difficulty in 
accordance witfrthe present invention, ttie proces- 
sor 32 generates a binary bit string whereih ' each 
data bit is represented by eight "sub" bits (herein 
"binary bits") where a : "0" is the sequence' of 
binary bits 1000 0000 or 80 HEX and a "1" is the 
sequence of binary bits'TOOO 1000 or 88 HEX (see 
binary bit strihg 220 and its HEX representation 
222 in Figure 6B). A framing character can then be 
defined by the 24 binary bit sequence 
(corresponding to three "O" data bit times) 1000 
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0000 0000 1000 0000 0000 or 80 08 00 HEX. so 
that flux changes generated at intermediate times 
can represent non-data information. 

Since representation of flux changes as either 
5 data or non-data framing characters depends on 
the' time spacing between flux changes, it can be 
seen from the time chart 230 of Figure 6B that the 
above binary bit representation results in the time 
* period "t" between flux changes for a zero, two 
ro consecutive tirne periods t2 for a one. and two 
consecutive time periods 3t/2 for a framing char- 
"acter. The octal representation 222 of the sequence 
" of binary bits 220 representative of the bit string 
fragment 226 is therefore 80 08 00 88 80 80 88 88. 
75 ''As can now be appreciated, a "1" in the binary bit 
' : string 220 generated by the processor 32 (Figure 
; 3) 'indicates not only that a flux change is to occur 
but also indicates when the flux change is to occur. 
' Therefore, by writing the binary bit sequence 220 
20 'serially' and at a predefined but constant rate, the 
"time between each binary bit in the string 220, will 
be ! the same and the time duration between flux 
changes will indicate the value of the data stored or 
' whether 'the information is a framing character. Of 
25 * course, other storage conventions may be adopted 
without departing from the spirit of the invention in 
its broader aspects. 

. ' ; the use' of eight binary , bits also permits a 
degree of error tolerance in reading. For example. 
30 : if instead of reading 80 HEX, the data read was 40 
■HEX. the processor could be programmed to still 
assign a "0" to that bit since 40 HEX should never 
occur and* really indicates that the bit read was 
prity displaced one binary bit position along the 
35 binary bit string. 

u Although the above bit and binary bit string 
' formats have been illustrated with reference to cer- 
tain specific characteristics, wide variations in the 
forrhatting of such bit strings are possible without 
40 '■ departing from the spirit of the invention in its 
broadest aspects. 

In order to store bit string 226 formatted in the 
'mariner described in conjunction with Figures 4 
and 6B as flux changes at selected intervals along 
" 45 the magnetic stripe 18, the corresponding binary 
1 'brt 'string' 220 in Figure 6B, is provided from the 
cbritrol processor 32 to tfte write subsystem 34 
1 (see Figure 3) which .then causes magnetic flux 
variafionV^to be applied along the length , of the 
so ' magnetic stripe where they are preserved for sub- 
sequent reading. , 

deferring to figure 5 in conjunction with Rg- 
' ures/ 3,; 6A, SB "and 6C the write subsystem 34 
includes a frequency synthesizer 50 coupled to 
55 receive a write speed clock signal from the control 
processor 32. The write speed clock is a clock 
representative of the speed with. which the trans- 
port mechanism 36 receives and passes the docu- 
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ment 10 beneath the write head 38 or the write 
head 38 passes across the document 10. The 
frequency synthesizer 50 'operates on the write 
speed clock and generates a synchronizing clock 
(SR clock) signal 204 which is coupled to a divide- 5 
by-8 circuit 52 and to' a parallel-to-serial converter 
54. The divi'de-by-8 circuit 52 generates identical ,' 
load and increment signals 206 and 207, respec- 
tively, the ihcremeht signal 207 is coupled to a 
counter 56 and the load signal 206 iscoupied the w 
parallel-to-serial converter 54. The control proces- 
sor 32. upon receiving appropriate signals from the 
transport mechanism' 36 indicating proper, align- 
ment of the document and cprrect write speed in 
the transport mechanism 36, generates a "write . is 
enable" signal 240 and a "write window" signal 
242 (figure 6C). The write enable signal. 240, en- 
ables writing when the transport mechanism 36 
indicates that' the head 38, is over the magnetic 
stripe 18. As soon as a high write enable signal 20 
240 occurs, the counter 56 is enabled and a switch 
58 closed. The leading edge data 150. (Figure 4), 
which may consist of leading framing characters or 
leading ones, is then written onto the magnetic 
stripe 18 by the head 38 which causes flux t 25 
changes to occur and remain impressed along the 
length of the magnetic stripe 18. 

The write window sipnal 242 indicates; the be- 
ginning of the start sentinel 152 and t the end of;, the 
leading edge 150 and enables the counter., 56 1 to . 30 
increment beyond "2". More specifically, counter 
56 increments on the increment signal. 207 (Figure 
6A) which occurs once every eighth SR clock pulse 
(204). Thus, the counter 56 incVe men ts, for ,e ? ach 
eighth binary bit in the octal represented sequence 35 
202 (222 in Figure 6B) received frop Jhe control 
processor 32. the count of the counter 56. and 
memory address data,. 200 (see also Figure ,8) from 
the control processor 32 are /coupled to a data 
memory 60 so as to store data .in the. ^proper 
storage location. The memory 60. js also coupled to 
the control processor 32 to receive data such as 
that illustrated by the octal sequence 202 (Figure 
6A) or 222 (Figure 6Bj:' ' ' .T 

The data stored in the ' data memory 60. is 
provided to the parallel-to-serial converter 54 ,in 
groups of eight binary bits whenever 'a load pulse 
206 occurs. The paraliel-tb-serial converter ,54 then 
outputs the value of one binary bit string (8 binary 
bits) each time there is an SR clock pulse, 204, with 
a flux changing pulse 'generated whenever there is 
a "1 " in the binary bit being serially outputted. The 
resultant serial data sighal*208 from "the 'parallel-to- 
serial converter' 54 is coupled to a toggle flipflop 62 
to generate the write' waveform 210* (224 in Figure 55 
6B). The output from the toggle flipflop' 62 is next 
coupled in sequence to* a level shifter 64, the 
switch 58. a slope limiter 66 and a . voltage- to- 



40 



45 



50 



. current converter and driver 68 to generate the 

, write current, 212 provided to the head 38. The 
level shifter.: 64 makes the waveform of., the write 
current 212 symmetrical about ground ^ potential 
with .the slope .limiter 66 controlling the rise and fall 
times., ' . ,| 

Referring to Figure 7. in conjunction with Fig- 
ures 3 and 8, the document 10 may be verified by 
inserting the document . 1 0- into the transport 
mechanism 36 -which causes the document 10 and 
the read head 39 to move relative to one another at . 
a predefined rate, under control of the control pro- 
cessor ,32. As the document 10 passes the mag- 
netic read, head 39. .flux changes previously im- 
pressed along the length of the magnetic stripe 18 

• t are, sensed causing an analog signal to be gen- 
erated which ideally would look like signal 228 but 

..ijn.r. reality will. look like an* actual read signal 300. 
The signal 300., is coupled to an AGC amplifier 70. 
The output of the AGC amplifier 70 is coupled to a 
/eceiver pre-amplifier 72 and, optionally, a digital 
controlled gain .amplifier 74. : Referring momentarily 

, to Figure \8 tbe>"actual read" curve 300 illustrates a 
peak which occurs below a (minimum peak-detec- 
tion .threshold. 301 • and* specifically identified as a 

. "dropout". In certain instances, a significant in- 
crease in the retrieval: of data will occur by->either 

; decreasing the threshold 301 or increasing the^gain 

. of tbe. amplifier 74 so that the "dropout" peak in 
the actual : read signal 300 will be detected as a 

. peak, and hence will- not be lost. The control pro- 
cessor 32 .supplies a gain register 76 with data 
through the. data buss to control the gain of the 
digitally controlled gain amplifier 74- 

The .output of the amplifier 74 is next- coupled 

, .to. a low pass filter 78 which filters out- high fre- 
quency noise, such as signal spikes, which would 

,i otherwise register as a flux change . and ' hence 

, indicate a false peak. The low pass filter therefore 
provides a means of additionally increasing - the 
reliability of reading the flux changes, stored on the 
magnetic stripe. , . . ■ ■ * 

The output of- the low pass filter JB is coupled 
.through .a suitable conventional AC; couple buffer 
amplifier, 80 to an A to D converter 82 whereby the 
analog signal 300 (Figure 8) is sampled at 

ti predefined intervals to generate a digitized data 

..signal;, 402 (Figure 9). The output of. the A to D 
converter 82 is coupled tosa correlator 84. with the 
objective .being,, to identify: the peaks in the signal 
300 and thereby determine, as accurately as possi- 
ble, the location of each flux change and the time 
between each peak, and : .whether -that peak-has a 
negative or a. positive .polarity. , 
.; The. digitized signal f 402 - from : the A to D. con- 
verter 82 is therefore coupled to the correlator 84. 
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Referring to Figure 9. the correlator 8'4 applies an 
nth order correlator function '400 which' in the 
present invention is selected to be approximately a 
cosine-squared function offset, so that: 



1 1 
n=l 



= A 




where c„ is tne correlator coefficient A is : zerb for 
no DC response, out may. be set to <a small value 
so, as to tnctuce some DC sensitivity. ' - 

in accordance wan conventional -correlator the- 
ory, trx: ansoiute- ✓alue of the correlator or' output. 
F*. may co conned as: r,.r; 



where: , • 

k is the sample numoer; and 
m„ . k is the input sample. 

This is illustrated at 404 in rigure 9.. - . . ' 

The cutout 404 iFj of the correlator 84 is 
coupled to a peak and polarity detector 86 which 
defines a square wave 406 having, a. value,- "1 " 
whenever the cuicut of .the. correlator 84 is greater 
than a predefined threshold 405. and "0" whenever 
the ouiput of the correlator 84 is below the thresh- 
old 405. Adaiticnally. the peak and polarity detector 

,86. generates a sign-signal 408 (Figure 9) identify- 
ing the correlator output, as either positive or. .nega- 
tive, If the output 404 of the correlator 84 is posi- 
tive, the sign-signal 408 is assigned: the value "1". 
whereas if the output 404 is negative, the sign- 
signal is assigned the value.: "0". 

In accordance with the inversion ,,;the midpoint 
of each square wave of the .signal 406 (410 in 
Figure 9) is , identified ; and coupled to . generate a 
digital read signal 302 (Figure .8) in which, ; each 
transition repre i sents a midpoint . (and hence a 
peak) in the signal 406. The data used by the 
control processor 32 is the polarity of each peak 

.(transition in the read signal 302) and the time 
duration since the last , peak (transition)., To derive 
time duration and polarity information from the; read 
signal 302, a memory 88. an address counter 90. 
switches. 93 and .95 and an address decoder 92 are 
coupled, under the control of the control processor 
32. to receive; the digital read .signal 302 and gen- 
erate the time . duration and poterityi data which is 
stored, in the- memory 88 in ;byte format (herein 

^'information ■ byte!*) where each; information byte 
represents the data for one peak i.e., one bit in the 



bit string. Each information byte has eight informa- 
tion bits and mctudes ; information bits indicating the 
polarity and state (peak or non-peak) several in- 
formation bits (e.g.,. 6) set to represent the time 
5 duration as a number of predefined time incre- 
ments' such as 2.5 usee. The data in the memory 
88 is periodically sent to the control processor 32 
via the data buss where the data is processed to 
correct errors in the bit string. 
io In accordance with the present invention, once 

" the time between "peaks (transitions; and the polar- 
' ity ' signal information is provided to the central 
' "' processor 32, a recovery process is applied so that 
' : ;' a' "bit. string with relatively few or no errors will take 
75 ' ' less execution time than bit string containing a 
significant number of errors. ' , 
' The data ' recovery method according to the 
indention first considers the time duration between 
' ' a peak and the previous peak and the polarity of 
20 each peak (i.e.", each byte of information) individ- 
' l uilly. Only one of five conditions can occur result- 
ing in a decision as to the value of a data bit 
represented by an information byte. The informa- 
* tidn byte and modifications to the information byte 
25 " are then used to construct a second data buffer 
' consisting of bits of the string being reconstructed. 
The five conditions and the resultant bits to be 
stored in the second buffer are as follows: 

1. If the time duration of the information byte 
30 (time from the previous peak) is within, limits deter- 

1 mined by the control processor for a zero (i.e.. 
equals a "zero bit time" t an acceptable deviation), 
and the polarity of the information byte is opposite 
1 from that of the previous information byte,. the bit 
as ' represented by the information byte must be a zero 
' and ' therefore a zero is stored for that bit in the 
second buffer. 

2. if the time duration of the information byte 
is within 'the" limits determined by the control pro- 

40 1 cessor for a zero, and the polarity is the same as 
: that of the following information byte, a flux transi- 
tion (peak) has been missed. , This necessarily 
means that the data represented by the information 
byte is a one. and therefore a one is stored in the 

45 " second buffer in the address for , that bit. 

! 'J tne . sum °* tne *' me duration of the 
current information byte and the time duration of 
the next information byte is with in the bit time for a 
zercy and the polarities, of the two information bytes 

so * are opposite. Jhe bijt value is necessarily a one and 
therefore a one is stored in, the second buffer. If. the 
bit 'is a "ope" .the following information byte is part 
of that "one" and therefore needs no further analy- 
sis^ and is skipped. . 

55 •/ . 4 V If, the .time duration of two consecutive 
* , information £ytes, are within the time duration 
specified .for a framing character, and the informa- 
tion bytes have opposite polarities, a ,, 2 ,, is stored 
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in the second buffer and an offset (see Figure 10) 
of each framing character in the buffer at that 
address is recorded foV later use. 

5. if the data value of an information byte is 
invalid (i.e., does not meet one of the above four 
conditions), for any reason, the actual value of the 
time duration information of the information' byte is 
stored in the second buffer unless the actual value 
is less than 2 in which event a 3 is stored at the bit 
address of the second buffer. ' 

During the above process, the control proces- 
sor computes the mean bit time, thai is.' the Jime 
between peaks for a valid bit (whether 1 or 0) using 
an average of the 16 previous valid bit time frames. 
This mean bit time value is used as the basis for 
determining which condition 'l -5' above is met by 
an information byte so as to identify data bits in the 
bit string as O's. 1's, framing characters or errors. 

The mean bit time value represents the speed 
that the magnetic stripe passes across the mag- 
netic head. This speed, in the preferred embodi- 
ment, is not allowed to vary more than ± 10% from 
a nominal speed. Further, the determination of 
when a peak occurs in respect to the established 
mean bit time value in determining whether the 
data character is valid, is set at ±12% for. the 
writing and ± 25% for reading, furthermore. 5 when 
an invalid data value is detected, the actual bit time 
of each following information byte is stored in the 
second buffer until a "0"* followed by two consecu- 
tive valid values (i.e., meet conditions 1. 2. or 3) or 
a framing character (condition 4^ is detected. 
. 'Once the second data buffer has been* con- 
structed, the number" of data bits in each data 
frame (8 bytes or 64 bits of data in the bit string) is 
determined. Since the number of data bits .between 
framing characters is predefined and known! the 
contiguous, invalid data values (time juration val- 
ues) are summed 'and divided' by the bit time 
defined for'a zer'o. the result is the number of. 
missing bits. This information enables the error 
correcting codes to determine the value 'of data bits 
not otherwise corrected. 

In accordance with a specific embodiment of 
the invention, the start sentihel is detectedby shift- 
ing the data from the second' buffer and' comparing ' 
if with a predefined bit pattern for the start sentinel. 
If no more than' a predefined number of bit errors 
occur, for example 2 bi t errors, a match is deemed 
to have occurred. The location 'along the second 
buffer at which the last bit of ! the start sentinel 
occurred is then recorded for 'later use. The stop 
sentinel is simiiarry ■ Ideated with' reference J to a 
predefined bit pattern. The location of the first oit of 
the stop sentinel in the second buffer is' similarly 
stored. Finally the number of'data bits between the 
stop and start sentinels is identified. Since' the total 
number- of data bits which should occur* is known. 



this additional information can be utilized to further 
identify the, .number, location, and. tn some in- 
stances, even derive the value of missing or erro- 
neous data in the second buffer, 

5 The start and end of the data to be recovered 

can be determined by .the location of the last bit of 
the start sentinel, the first framing character and 
the number of bits between the start and stop 
sentinels. A flow chart illustrative of one technique 

io for obtaining this information is illustrated in Figure 
10. 

In i accordance- with the preferred embodiment 
of the invention, there are 8 bytes of data (64 bits) 
between each framing character (herein referred to 

75 ■•■as a "frame ofidata"). Accordingly, the byte offset 
(referred to in condition number 4 above) of each 
frame of data in the recovered array in the second 
buffer is determined by the number of bits in each 
frame of data between the first and ' last valid 

20 frames. The offset of the first frame is determined 
in accordance, with the flow chart of Figure 10. In 
accordance with the invention, the offsets for the 
remaining frames, once the offset for the first frame 
is determined, is in accordance with the equation: 

25 Offset (n + 1) = Offset (n) + 8 ' (bits (n)/72 + 
1) where; 

offset (n) is the byte offset in the recovered data 
array for frarhe*n. and 

bits (n)' is the number of detected bits in frame 

30 ■ ( n.'- 

1 A frame length of 72 bits is used to compensate for 
inaccuracies : 'ih calculating the 'number Jof bits in 
each frame! ; ! 

In accordance with further aspects of the inven- 

35 tion, starting with the first valid frame, the data bits 
are packed into' bytes in the recovered data bit 
string in the second buffer. A maximum of 64 bits 
of data are packed per frame of data until the last 
frame of 'data is formed. Buffer locations and recov- 

40 ered offsets of invalid data are recorded and all 
missing bits are piacked as Vs. If any frame had an 
offset greater : than 8 bytes from the previous frame, 

• the data bits' : ffom the previous v frame are packed 
into bytes starting from' the end 1 of the frame' and 

45 ' moving in reverse. A maximum of 64 bits ' are 
' packed for a missing frame. Information concerning 
"invalid -data is recorded, as previously described, 
with Vs. 

In accordance with arHllustr&tive embodiment 
so of' the invention, if the number 'of recovered" data 
bits is greater than 888 but less than 1024, and 
less than 3 invalid areas in the data bit' string 1 were 

• detected, error ■ correction 1 routines are executed 
with the message (bit string) length' set to 119 

55 : ; bytes. If the number of recovered data bits is 
. greater than '1024 and less than 3 invalid areas 
'i were detected, the error correction routines are 
•r executed with the message (bit string) length set to 
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144 bytes. If the error correction "routines are un- 
successful, or the above conditions are not met. 
values stored in the invalid data areas are' evalu- 
ated to determine the content. Since three valid 
data values are required to end an "invalid data 
area," the last two values in the invalid data area 
■ are valid. Therefore/ the process begins at the end 
of the invalid data area (error area) and moves 
towards the start examining the* data values individ- 
ually. The flow chart 'for an illustrative means for 
performing this process is set forth in Figure 1 1 . 

Error correction routines-using the error correc- 
tion code are next executed ■ with the message 
length set to 119 bytes if less than 1 1024 bit are 
recovered. Otherwise the message length is set to 
144 bytes. If the error correction routines 'are un- 
successful, the bits' in each invalid' data area, ex- 
cept for the last two bits in each invalid data 1 area, 
are inverted. The error correction- routines are' ex- 
ecuted again with the message 'length unchanged. 
If the error 'correction routines' are ; still unsuccess- 
ful, the message length is changed to the other set 
length, (that is 1 19 to 144 or 144 to 1 19), and ' the 
error correction routines are again executed. If the 
error correction routine are still unsuccessful, the 
data bits in each invalid data area are inverted to 
their original values and the error correction rou- 
tines are executed with the message length ' un- 
changed. If the error correction routines' are still 
unsuccessful, an error code is generated indicating 
that the document is not readable. ■ - 

As previously indicated/ various error correc- 
tion codes are possible in accordance with the 
invention. However/in the preferred embodiment, 
error correction using the Bose-Chaudhuri-Hoc- 
quenghem codes as set forth in the Peterson and 
Wefdon book entitled Error-Correcting Codes - 
(Second Edition), published by the MIT Press and 
fully described at page 269 et seq, is preferred. 

Once the originally stored encrypted identifier 
(verification value) has been recovered without er- 
ror, it is decrypted and compared against a second 
identifier derived from the document's uniqueness 
characteristic. A positive correlation between them 
means the document is authentic. 

Although the above description has been made 
with reference to the illustrative system of Figure 3 
which includes both magnetic stripe reading and 
writing capabilities, passive reading systems with- 
out the write subsystem 34 or write head 38 are 
contemplated at most remote verification locations 
since writing capabilities would be unnecessary. 
Various other changes and modifications are also 
possible, including using a different storage me- 
dium, such as a bar code or other printed code 
pattern, without departing from the present inven- 
tion. 



Claims 

1. A 'method for authenticating a document or 
other item (10), in which a sequence of representa- 
5 tions freshly derived from sensing (40) the item 
(10) is compared (32) with a sequence of reference 
representations registered on the item (10), charac- 
terised in that the sequence of reference repre- 
sentations is a bit string (149, Figure 4) recorded in 
io magnetic material (18) of the item (10). that the 
' recorded bit string (14*9) is read out from the mag- 
netic material (1&), and that the bit string as read 
out (300, Figure 8) is processed (32.42) to detect 
' ' errors therein and to correct for at least some of 
75 the errors detected, before comparison with the 
freshly-derived representations is made. 

l 2; A method according to Claim 1 charac- 
terised in that the bit string (149) is recorded in 
encrypted form and the processing (32,42) of the 
20 ' 'bit string as read out includes a step of decryption. 
1 ' 3. 1 A method' according to .Claim 2 charac- 
' ; terised in that 'a key (158, Figure 4) used in the 
step o'f ! decryption' is read out from the magnetic 
f material with the bit string: 
25 : ' 4/ A method according to any one of Claims 1 
to 3 characterised in that the processing of the bit 
string (300) includes a step of assigning data val- 
ues to bits of the string in dependence upon rela- 
! tive timings of signal-peaks read out from the mag- 
30 ' netic material' (18). ' ' 

5. A method according to any one of Claims 1 
to 4 characterised in that reading of the . bit string 
from the magnetic material . (18) includes the step 
r: of detecting magnetic flux changes in the magnetic 
35 material'to derive an analogue signal (300) depen- 
' dent on the flux changes, that the relative timings 
of peaks in the amplitude of the analogue signal 
(300) are determined, and that the processing of 
the bit string includes assigning data values to bits 
40 of trie string according to the peak-polarities and 
; the detected relative timings of the peaks in. the 

analogue signal (300). 
' 6. : ~A method according to . Claim 4 or Claim 5 
characterised in that the time .interval between suc- 
45 cessive peaks determines whether the data value 
* '0' or 'Vis assigned to the respective bit or, the bit 
is treated otherwise than .as a data bit of., the 
sequence. , \ • . ; 

' ' 7. A ''method, according to Claim - 6 charac- 
50 terised in that the data, value '0' pr '1' is assigned 
to the respective bit in dependence upon whether 
the interval between successive peaks corresponds 
to a period of, length t or t/2. 

'8. /V method according to Claim 7 charac- 
55 /terised in i5 that .the ..respective .bit is assigned 
' control-character status ,in the event that the inter- 
val between successive peaks corresponds to a 
period of length 3t/2. 

10 
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9. A method according to any one of Claims 1 
to 8. characterised in that each bit value" of the 
string is recorded as a plurality of bits (220 Figure 
6B). ' ' * 

10. A method according to any one of Claims 1 
to 9. characterised that it includes the' step, of deriv- 
ing a bit string by sensing the item (10) and 
recording this bit string on 1 the item in the 'magnetic 
material (18) 

1 1 . A method 'according to any one of Claims 1 ,, 
to 10 characterised in that the item, is. a paper 
document (10) and that the magnetic material (18) 
is printed on the paper document (10). ' 

12. A method according to Claim 11 charac- 
terised in that the printing of the'magnetic material 
(18) is by offset printing. ' , ' 

13. A system for authenticating a document or 
other item (10), in which" a sequence of representa- 
tions freshly derived from sensing (40) the item 
(10) is compared (32) with a sequence of reference 
representations registered on the'item (10), and an 
output related to authenticity, of the" item (10) is 
provided in dependence upon '.the result of, the 
comparison, characterised in that the' system in- 
cludes means (39) for reading the sequence of 
reference representations as a bit string (149, Fig- 
ure 4) from magnetic material (18) of the item (10), 
and means (32.42) for submitting the bit string as 
read out (300. Figure 8) to a process for detecting 
errors therein and* for correcting at (east some of 
the errors detected, before comparison, with the 
freshly-derived 'representations is made. 

14. ' A system according to, Claim 13 charac- 
terised in that the bit string (149) is recqrded in 
encrypted form on the item ' (10), and that the 
processing' means (32*42) decrypts the bit string 
read out (300). " 

15. A system according to Claim 14 charac- 
terised in that a key (158, Figure %) for decryption 
of the bit string read out (300), is derived frprp data 
(158) read out from the magnetic material (18) with 
the bit string. i « 

16. A system according to any" one , of Claims 
13 to 15 characterised in that the" processing 
means (32,42) detects the relative timings of 
signal-peaks read out from the magnetic .material 
(18), and assign data values to bits of the string in 
dependence upon the detected relative timings. 

17. A system according to any one of Claims 
13 to 16 characterised in that the means' for read- 
ing the bit string from the magnetic' material' (1*8) 
detects magnetic 'flux changes* in the magnetic 
material to derive an analogue signal' (300) depen- 
dent on the flux changes', * that ' the processing 
means (32,42) detects "relative timings of peaks in 
the amplitude of the analogue signal (300), and that 
the processing' means 132,42)' assighs data'values 



(! to bits of. the bit string according to the peak- 
polarities and the. t detected relative timings of the 
peaks in the analogue, signal. (300). 

18. A system according to Claim 16 or Claim 
5 17 characterised in that the processing means 
(32,42) detects the time intervals between succes- 
sive peaks and in accordance therewith assigns the 
data value *0; or V to the respective bit or treats it 
as a non-data, bit of the sequence.,. 

to 19. A -system' according to Claim 18 charac- 

terised, in that, the data value XT or T is assigned 
to the respective bit in dependence upon whether 
the interval between successive peaks corresponds 
to a period of length t or V2. ■ ■..-<. 

'5 . - 20. A ..system , according to Claim 19 charac- 
terised , in that 'the, respective ■ bit is assigned 
control-character status in. the event that the inter- 
. va I between successive peaks corresponds to a 
period of length 3t/2. ■ , 

20 . ■ , 21. A system according to any one of Claims 
13 to 20 characterised in that each bit value of the, 
string is recorded as a plurality of bits (220 Figure 
6B). . . : * : . 

, 22., A systern according to any ; one of Claims 

25 .. 13 to 21 Characterised .in that the system includes 
provision (38) for recording a bit string in the mag- 
netic material (18) in. accordance with a sequence 
. of representations derived from sensing (40) the 
item (10), . " . , , j . 

30 24. A- method according to any one of Claims 

13 to 23 characterised in that -the printing of the 
magnetic, material (1 8) is offset printing. 
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© Authenticating methods and systems. 



© Authenticity of a paper document (10) is tested 
by sensing (40) its transparency and comparing (32) 
the sequence of representations produced, with a 
sequence of reference representations read (39) 
from a record of an earlier-made sensing written (38) 
on the document (10) in an offset-printed (and there- 
fore non-uniform) magnetic stripe (18). The refer- 
ence sequence is written on the stripe (18) in the 
form of an encrypted identifier (156, Figure 4) within 
a bit string (Figure 4) that is interspersed with fram- 
ing characters (155) and includes a public encryption 
CV)key (158) and an error-correction code (162). Each 
^data and control bit of the bit-string format is written 
00 as an eight-bit character enabling ready distinction 
[^between data and control bits and enhancing error 
CO detection and correction of the string when read (39) 
^from the non-uniform stripe (18); the relative timings 
OOand the polarities of peaks of the analogue signal 
^Ifrom the magnetic reading head 939) determine the 
Qdata value ("0" or "1" according to timing interval t 
or t/2) or the control nature (int rval 3t/2) or each 
QJread bit. The error-correction code is applied to 
reduce errors and enable decryption of the recorded 
identifier using the public key, whereby an appro- 



priate degree of correlation for authenticity confirma- 
tion, can be achieved with the fresh transparency 
output (40). 
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